Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were disclosed on October 21, 2026, allowing unauthenticated remote code execution (RCE). The vulnerabilities, collectively known as PHP2Shell, affect all PHP installations serving web requests, including popular pl...
Hackers have launched 2.3 million attacks on Palo Alto Networks' GlobalProtect VPN portals. This wave of attacks has raised concerns among users of the VPN service, highlighting the ongoing risks associated with cybersecurity vulnerabilities. The specific methods and tools used in these attacks have...
Beginning on November 14, 2025, Palo Alto Networks' GlobalProtect portals experienced a significant increase in malicious traffic, with nearly 2.3 million IP sessions targeting the login endpoint in just 24 hours. This surge, reported by GreyNoise, represents a 40-fold increase and marks a 90-day hi...
